84354 2002-11-14  15:34  /62 rader/ K. K. Mookhey <cto@nii.co.in>
Importerad: 2002-11-14  15:34  av Brevbäraren
Extern mottagare: secpapers@securityfocus.com
Extern mottagare: bugtraq@securityfocus.com
Extern mottagare: focus-linux@securityfocus.com
Extern mottagare: focus-sun@securityfocus.com
Extern mottagare: COBIT-L@share.isaca.org
Extern mottagare: audit-l@list.auditnet.org
Extern mottagare: Amjad Malik <amjadm@hblpk.com>
Externa svar till: cto@nii.co.in
Mottagare: Bugtraq (import) <2386>
Ärende: The Unix Auditor's Practical Handbook
------------------------------------------------------------

==============================================
            "The Unix Auditor's Practical Handbook"
                    http://www.nii.co.in/tuaph.html
                                          by
                                K. K. Mookhey
                Network Intelligence India Pvt. Ltd.
                            http://www.nii.co.in
==============================================


We at Network Intelligence India Pvt. Ltd. have written a document on
unix auditing called "The Unix Auditor's Practical Handbook", which
is available for download from our website
http://www.nii.co.in/tuaph.html

The idea behind this is to present a step-by-step practical guide to
auditors when carrying out a Unix Audit. It mostly covers Sun Solaris
systems, but it has cross-references for AIX and Linux.
It details the auditing procedure right from the moment you enter the
client's server room, to running the automated auditing tools.

It covers the following areas of an Audit:
1. Preliminary Steps
2. Documentation
3. Physical Security
4. Operating System Security
5. Network Security
6. Filesystem Security
7. User and Group Security
8. Sun Built-in Auditing
9. Backup and Emergency Response
10. Automated Auditing Tools
11. References

We have kept the focus on the practicality of conducting an audit,
providing the reader with the commands, filenames, tools, and
techniques for carrying out the audit.

It is also useful for security administrators, who might be looking to
implement security on their Unix Servers.

Please send all feedback to unix@nii.co.in

Sincerely,
K. K. Mookhey
CTO
Network Intelligence India Pvt. Ltd.
Tel: 91-22-22001530, 22006019
Email: cto@nii.co.in
Web: www.nii.co.in

============================================================
The steps carried out as part of this document are already present in our
automated Unix auditing tool:
AuditPro for Unix:
http://www.nii.co.in/software/apunix.html
============================================================
(84354) /K. K. Mookhey <cto@nii.co.in>/---(Ombruten)